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This report describes a flexible, reliable, deep space life support system design approach 
that uses either storage or recycling or both together. The design goal is to provide the 
needed life support performance with the required ultra reliability for the minimum 
Equivalent System Mass (ESM). Recycling life support systems used with multiple 
redundancy can have sufficient reliability for deep space missions but they usually do not 
save mass compared to mixed storage and recycling systems. The best deep space life 
support system design uses water recycling with sufficient water storage to prevent loss of 
crew if recycling fails. Since the amount of water needed for crew survival is a small part of 
the total water requirement, the required amount of stored water is significantly less than 
the total to be consumed. Water recycling with water, oxygen, and carbon dioxide removal 
material storage can achieve the high reliability of full storage systems with only half the 
mass of full storage and with less mass than the highly redundant recycling systems needed 
to achieve acceptable reliability. Improved recycling systems with lower mass and higher 
reliability could perform better than systems using storage. 


Nomenclature 


4BMS 

= 

Four Bed Molecular Sieve 

BVAD 

= 

Baseline Values and Assumptions Document 

CEV 

= 

Crew Exploration Vehicle 

CM 

= 

Crew member 

D 

= 

Duration, days 

ECLSS 

= 

Environmental Control and Life Support Systems 

ESM 

= 

Equivalent System Mass 

FD1R 


Fault detection, isolation, and repair 

HEFT 


Human Exploration Framework Team 

HS1R 

= 

Human Systems Integration Requirements 

ISS 

= 

International Space Station 

Kg 

= 

kilograms 

LEO 

= 

Low Earth Orbit 

LiOH 

= 

Lithium hydroxide 

LOC 

= 

Loss of Crew 

LOM 

= 

Loss of Mission (LOM) 

MTBF 

= 

Mean Time Before Failure 

N 

= 

Number of recycling processors 

NASA 

= 

National Aeronautics and Space Administration 

NEO 

= 

Near Earth Object 

Pr 

= 

Probability 

Piffail) 

= 

Probability of failure 

Pr(LOC) 

= 

Probability of LOC 

Psia 

= 

Pounds per square inch absolute 

SPWE 

= 

Solid Polymer Water Electrolysis 

SSF 

= 

Space Station Freedom 

VCD 

= 

Vapor Compression Distillation 
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I. Introduction 


T HIS report describes the architecture design, analysis, and simulation of a flexible, reliable deep space life 
support system. The proposed life support system architecture achieves flexibility and reliability by using a 
mission duration dependent combination of storage and recycling to provide life support. Ultra reliability can be 
achieved by using storage, but the required launch mass is high. Recycling saves mass compared to storage, but 
recycling has such high mass and failure rates that systems using storage usually achieve the required reliability with 
less mass. 

Other researchers have presented life support design approaches using storage and recycling with redundancy 
and computed the resulting Equivalent System Mass (ESM), but they did not specify or evaluate the system 
reliability . 1 2 This work considers the system reliability and the resultant probability of Loss of Crew (LOC) for 
storage, recycling, and mixed storage and recycling configurations. 

The deep space life support requirements, objectives, and design criteria are determined by the mission and are 
well understood. They include good performance, minimum life cycle cost, and ultra reliability to ensure crew 
safety. Deep space is the limitless region beyond the Earth-Moon system. Possible future deep space exploration 
objectives include Near Earth Objects (NEOs), which are asteroids in orbits similar to Earth’s, Mars and its moons, 
and perhaps beyond to the asteroid belt and even Jupiter and its moons. The International Space Station (ISS) and a 
moon base would be suitable test beds for deep space and Mars life support. 

There are two basic, familiar, and fundamentally different life support system architectures, open with Earth 
supplied material stored onboard, and closed with extensive material recycling. The possible use of planetary or in- 
situ resources is an attractive addition. Open systems using Earth supply and storage are considered best for short 
missions that have low total life support material requirements, while closed recycling systems can save launch mass 
for long duration missions that have much greater total material consumption. The ISS originally had a ten year 
duration mission and uses recycling life support. As ISS illustrates, long duration missions are not necessarily in 
deep space, but deep space missions always have long duration because of their extended travel time. 

Recycling is usually recommended for long duration missions because of the large amounts of water and oxygen 
consumed, but there is a design complication. Near space missions such as ISS have the potential to receive life 
support materials or spare parts quickly from Earth in the case of a failure, and the crew can return quickly if life 
support cannot be repaired. Deep space missions cannot get materials or parts quickly and the crew cannot return 
until the planets align. Deep space missions require much higher reliability than near space missions. The design 
complication is that open systems using materials sent from Earth and stored onboard are much more reliable than 
recycling systems using complicated mechanical components and chemical processes. The increasing distance and 
duration of further out deep space missions suggest both using recycling to reduce launch mass and using stored 
materials to increase reliability. The best system design uses both storage and recycling but is predominantly 
storage. 

A flexible, reliable, deep space life support system design approach is adaptable, using a mix of stored and 
recycled materials, which could be supplemented by planetary or scavenged materials if available. Near space life 
support systems would typically use full storage for short missions and add recycling for missions longer than 
several months. Fully closed systems that use crop plants to grow food and recycle water and oxygen do not seem to 
be economical with current technology for even the longest missions. Deep space life support systems will use 
storage more than long duration near space systems, because the higher reliability requirement in deep space 
requires the use of storage. The best design is a hybrid architecture combining storage and recycling systems. 

II. Overview 

What should be the design architecture of the life support system for deep space missions? Trade studies 
performed over the last few decades suggest water and oxygen would be recycled using a system similar to the 
International Space Station (ISS) Environmental Control and Life Support System (ECLSS). A system similar to 
ISS ECLSS was tested with humans in a closed environment for ninety days during the Apollo era. Since then, life 
support research has focused on improving ECLSS subsystem technology for functions such as water purification or 
carbon dioxide removal. 

Why was recycling always selected? Short missions to Low Earth Orbit (LEO) or in the Earth-Moon system, for 
instance Apollo and the space shuttle, provide the crew with water and oxygen launched from Earth and stored on 
board. But for long duration missions such as the ISS, the total required mass of water becomes very large and the 
cost of launching all this mass to LEO is prohibitive. Deep space missions using current rocket technology, and 
taking Hohmann trajectories to minimize propulsion energy and cost, necessarily have long durations. And the cost 
of transporting payload mass to its destination is much higher beyond LEO. Deep space missions were assumed to 
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require recycling because of their long duration and the higher cost of mass per kilogram to reach objectives far 
beyond LEO. 

The first human deep space mission such as exploring an NEO or Mars is in the future. It will present a new 
challenge to ECLSS because, unlike 1SS, the crew cannot quickly obtain replacement parts or return to Earth if an 
ECLSS failure occurs. Deep space life support must be made ultra reliable by providing storage or redundant 
systems, as well as spare parts to repair failures. 

It was long unquestioned that the life support system for deep space would recycle water and oxygen in a way 
similar to ISS and would provide higher reliability using redundancy. It was also usually assumed that the ISS 
ECLSS, although the model for deep space, would be extensively redesigned to reduce the mass of the system and 
its continuing material logistics supplies and to increase its intrinsic reliability. 

Recent proposals challenge these assumptions. It has been suggested that deep space missions be conducted 
using the Orion Crew Exploration Vehicle (CEV) designed for short missions by providing large amounts of stored 
water and oxygen. It has been suggested that the ISS Node 3 containing its current ISS ECLSS be used in deep 
space. It has been suggested that stored materials be used instead of recycling to provide minimum survival needs, 
because of the lower intrinsic reliability of complex recycling systems and the consequent great cost and difficulty 
to achieve ultra reliability. 

The best life support system design for deep space missions has become an open question after forty years. This 
report attempts an answer by investigating a flexible, reliable, deep space life support system design approach using 
storage and recycling systems or both. 

A. Content 

This report considers the following major design topics: 

1 . Life support material requirements 

2. Life support reliability requirement 

3. Storage systems 

4. Redundant recycling systems 

5. Partial mission duration storage with foil recycling 

6. Partial water storage and water recycling with full other storage 

The different systems’ ESM and reliability are compared and the best designs identified, as they depend on the 
mission duration. It was expected that pure storage life support would be best for brief near-Earth missions, that 
recycling with redundancy would save mass with adequate reliability on the longer shortest deep space missions 
such as NEO’s, and that the farthest deep space missions such as Mars would need to use partial stores to increase 
reliability. As it turns out, redundant recycling cannot save mass and achieve the required reliability when compared 
with a combined water storage and recycling system, except for the longest missions beyond Mars. 

B. Results 

The report reiterates the following familiar results: 

1. Recycling can save considerable mass on long missions. 

2. Ultra reliability is needed for deep space missions. 

The report confirms the following known but not always acknowledged points: 

1. Ultra reliable recycling systems must be developed. 

2. Developing ultra reliable recycling will be difficult, costly, and time-consuming. 

The report finds the following unexpected results: 

1. Recycling systems do not have low enough mass and failure rates to beat storage. 

2. Material storage predominates in the lowest mass designs that meet reliability requirements. 

3. For ultra reliability, storage must provide for all vital needs over the full mission duration. 

4. Water beyond the survival minimum can be provided by redundant recycling. 

5. Combined water storage and recycling can save half the mass of full storage systems. 

Recycling will not fulfill its long anticipated role in deep space until its mass can be reduced and its reliability 
increased. 


III. Storage and recycling 

The optimum choice between, or combination of storage and recycling depends on the mission duration and 
reliability requirement. The amount of life support materials consumed by the crew grows directly with the mission 
duration. The fixed initial ESM of the recycling equipment must be paid for by the reduced mass of materials that 
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otherwise would have been launched and stored. The ESM gained by recycling rather than Earth supply and storage 
increases with longer mission duration, so that recycling usually breaks even in ESM after several months. 3 
However, long duration missions in deep space require much higher reliability than missions to LEO or in the Earth- 
Moon system. A deep space mission cannot be provided with life support materials or spare parts if a failure occurs 
and the crew cannot return quickly. Storage in simple tanks has intrinsically higher reliability than recycling using 
complex chemical processing machinery. Spare parts and redundancy are needed to increase the reliability of 
recycling, but they increase the ESM and delay the recycling breakeven date. Recent discussions within NASA have 
emphasized the need for ultra reliability and deemphasized the desirability of recycling and material closure 4 . Once 
we consider reliability, the long-obvious justification for concentrating on reducing the ESM of recycling equipment 
is less clear. 

The best design for a deep space life support system provides adequately for the crew, over the mission duration, 
with the required probability of LOC, for the minimum ESM. If the life support requirements of materials per day 
and probability of LOC are fixed for the mission, the best design depends on the mission duration. The total amount 
of material increases directly with duration, so, considering ESM, longer duration favors recycling. A fixed 
probability of LOC over the mission duration requires a lower probability of LOC per day as the mission duration 
increases and a lower failure rate per day, so, considering reliability, longer duration favors higher reliability 
storage. This conflict creates a need to carefully consider the choice or mixture of storage and recycling. 

Another consideration affects the conflicting goals of recycling closure and reliability as the mission duration 
increases. The daily life support requirements for food, oxygen, and water are not necessarily fixed. On longer 
missions, the crew needs exercise, increasing food and oxygen intake, and would benefit from showers, 
dishwashing, and laundry, greatly increasing water use. The increased material requirements per day for longer 
missions favor recycling, but the additional less necessary requirements may be provided with lower reliability or 
provide margin for more urgent requirements. 

We will describe a flexible, reliable deep space life support system design approach using storage or recycling or 
both. It is assumed that all the food will be dehydrated with negligible water content. Fully hydrated food would add 
available water in a way similar to storage, and could be substituted for water storage. Some additional water will be 
produced from the metabolism of food. The mixed provision of life support material by storage and recycling can 
achieve ultra reliability with less mass than full storage. 

IV. General requirements 

The deep space life support overall design requirement is, “Provide the required life support performance with 
ultra reliability at the minimum life cycle cost.” The performance requirements are based on human physical needs 
and are well understood. Life support must establish a healthy environment by removing carbon dioxide and 
providing oxygen, water, and food. The water requirement has varied considerably, especially for hygiene and 
laundry, and loss of some hygiene water processing capacity would not be life threatening. 

The life support design drivers controlling system sizing and reliability are the number of crew, the carbon 
dioxide, water, oxygen, and food mass requirements per crewmember per day, and the length of the mission. 
Multiplying the number of crew, the mass per crewmember per day, and the length of the mission in days gives the 
total mass of life support materials needed during the mission. The failure rate per day for life-threatening failures 
times the mission duration in days gives the probability of loss of crew due to life support failure. A constant failure 
rate per day is assumed. (For a discussion of this assumption see Appendix B: Exact failure probability 
calculations.) 

We estimate the amount of oxygen required, carbon dioxide produced, and the minimum and more comfortable 
amounts of water. We then discuss the required reliability. 

A. Oxygen, carbon dioxide, and water quantity requirements 

The life support system functions include air revitalization (carbon dioxide removal, oxygen generation), and 
water reclamation (potable and hygiene water processing, urine reclamation). A summary of the minimum oxygen, 
carbon dioxide, and water processing rate requirements for a crewmember is given in Table 1, in kg per 
crewmember per day (kg/CM-d). 


4 

American Institute of Aeronautics and Astronautics 



Table 1. Minimum life support system output products and input waste streams. 


Output products 

kg/CM-d 

Input waste streams 

kg/CM-d 

Crew oxygen 

0.84 

Carbon dioxide 

1.00 

Food solids 

0.62 



Drinking and food water 

3.52 

Respiration and perspiration condensate 

2.28 

Urine flush water 

0.50 

Urine and flush water 

2.00 

Wash water 

1.29 

Used wash water 

1.29 

Total system products 

6.77 

Total system inputs 

6.57 


These minimum requirements are based on space station analysis, except that showers, dish washing, and most 
crew hygiene water have been eliminated. 5-8 The waste streams include carbon dioxide and water produced from the 
dehydrated food by the crew metabolism. 

A life support system using only initial supply and storage would provide oxygen, food, and water from storage. 
Carbon dioxide would be removed using lithium hydroxide (LiOH) canisters. The crew could tolerate such a short 
supply of water for short missions and the cost of launching the life support mass would be relatively small. 

The crew would benefit from more water on longer missions. Table 2 shows expanded water processing rate 
requirements per crewmember per day. 


Table 2. Minimum plus expanded water system outputs and input waste streams. 


Output products 

kg/CM-d 

Input waste streams 

kg/CM-d 

Crew oxygen 

0.84 

Carbon dioxide 

1.00 

Food solids 

0.62 



Drinking and food water 

3.52 

Respiration and perspiration condensate 

2.28 

Urine flush water 

0.50 

Urine and flush water 

2.00 

Hygiene water 

12.27 

Used hygiene water 

12.27 

Clothes washing water 

12.50 

Used clothes washing water 

11.90 



Clothes dryer humidity 

0.60 

Total system products 

30.25 

Total system inputs 

30.05 


The first four rows for oxygen, food, drinking water, and urine flush are identical to Table 1. The hygiene water 
is increased to include an additional 2.80 kg/CM-d of wash water, 2.73 kg/CM-d of shower water, and 5.45 kg/CM- 
d of dish wash water. Clothes wash water is added.' vS The cost of providing these materials would be very high for a 
long mission. A recycling life support system would generate most of the needed output products by recycling 
exhaled carbon dioxide, condensed respiration and perspiration water, urine and urine flush water, used hygiene 
water, used clothes washing water, and condensed clothes dryer humidity. 

B. Effects of lack of oxygen, carbon dioxide removal, and water 

Oxygen, carbon dioxide removal, and water are necessary to sustain life. The amount of each needed by an 
individual crewmember varies with body mass, food consumption, and especially with activity level and, for water, 
ambient temperature, but the individual’s basic requirements of Table 1 must be met. Anoxia, low oxygen, can cause 
loss of consciousness and death within a few minutes. 

A typical habitat volume at Earth normal atmosphere, contains 79 kg of nitrogen and 21 kg of oxygen. Three 
crewmembers will use 2.52 kg of oxygen per day, so with no additional oxygen, oxygen falls from 21 percent to 19 
percent after one day, and 17 percent after two days, reaching the hypoxic boundary of impaired performance. 5 6 
However cabins of future spacecraft for human exploration may operate at pressures below Earth normal. 9 

The NASA Constellation Program Human Systems Integration Requirements (HS1R) specification calls for a 
nominal partial pressure of carbon dioxide less than 0.100 psia. 10 For an Earth-normal atmosphere composition and 
pressure, 14.7 psia, this corresponds to 0.7 percent carbon dioxide by volume. This concentration is much higher 
than Earth normal, which is about 0.04 percent. Any level more than 0.2 percent is usually noticeable unless gradual 
adjustment has occurred. Adaptation to sustained carbon dioxide levels of up 2 percent is possible without adverse 
effects. Above 2 percent by volume, carbon dioxide causes headaches and hyperventilation. At 3 percent, it causes 
breathing problems, and at 6 percent, hearing and vision are affected. 11 ' 12 
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Tables 1 and 2 indicate that one crewmember produces 1.0 kg of carbon dioxide per day. A typical habitat 
volume contains about 100 kg of Earth normal atmosphere. Without carbon dioxide removal, three crewmembers 
will accumulate 3 percent of carbon dioxide in one day and 6 percent in two days, causing very serious problems. 13 

Lack of water is less acute but also extremely serious. Dehydration can cause nausea, cramps, lightheadedness, 
confusion, weakness, coma, and death. At 70 F, remaining quiet, a person might possibly live ten days without 
water. However, earthquake victims trapped without water typically do not survive more than three days. The 
absolute bare minimum water loss possible for person resting at a cool temperature is about 1.3 kg per day. 14 ' 15 This 
is about one-fourth the specified requirement of 5.31 kg in Table 1. Death occurs when water having about 20 
percent of body weight is lost. 14 15 Drinking and food preparation water must be ultra reliable, with one or two days 
maximum unavailability. Urine flush water, hygiene water, and clothes wash water are far less important. 

V. Probability of loss of crew, Pr(LOC), requirement 

Given the life support performance needed, the other major requirement is the reliability of that performance, 
expressed as the probability of loss of crew, Pr(LOC). A reasonable Pr(LOC) for an entire deep space mission, 
acknowledged to be high risk, might be 1 in 100. The life support system Pr(LOC) must then be roughly an order of 
magnitude lower, 1 in 1,000. LOG can be caused by a zero oxygen level for a few minutes, no added oxygen for 
about three days, no carbon dioxide removal for about two days, or no drinking and food preparation water for about 
two days. We will assume that the Pr(LOC) must be less than 1 in 1,000 for all mission durations. 

Since we assume that the probability of LOG will be a certain fixed number for all mission durations, the daily 
failure rate of the life support system must decrease directly with the mission duration. Design to meet the required 
Pr(LOC) will be easier at shorter durations and more difficult at longer durations. The best life support design 
achieves the required Pr(LOC) at minimum ESM. 

VI. Life support storage equivalent system mass, ESM 

Storage life support systems provide all the needed materials from Earth without recycling and they store or 
discard all the waste. The cost of stored supplies is proportional to the mass of life support supplies needed. The 
materials provided include oxygen, water, and lithium hydroxide (LiOH) to remove carbon dioxide from the cabin 
atmosphere. Additional mass is required for oxygen and water tanks and for LiOH packaging. 

A crewmember’s daily requirements for oxygen and water were shown in Table 1. The oxygen and water require 
additional mass for storage tanks. Reasonable estimates are 0.4 kg of tankage per kg of oxygen 11 and 0.2 kg of 
tankage per kg of water. 16 About 2 kg of LiOH is required to remove the 1 kg of carbon dioxide per crewmember 
per day. 17 The shuttle canister weighs 7 kg and is rated at 4 crewmember-days, which gives 1.75 kg/CM-d. 

The total daily material needs for oxygen, water, their tanks, LiOH, and its packaging are shown in Table 3. 


Table 3. Storage life support ESM . 



kg/CM-d 

Oxygen 

0.84 

Oxygen tankage 

0.34 

Water 

5.31 

Water tankage 

1.06 

LiOH and packaging 

1.75 

Total 

9.30 


Oxygen, water, and carbon dioxide removal can be provided for 9.30 kg/CM-d. 
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VII. Life support recycling system 

Figure 1 shows the block diagram of a typical life support system using recycling. 


Cabin 

C02 


C02 


C02 

air in ^ 

removal 


storage 


reduction 


Vent 


Water 

out 


02 in 


Waste 
water in 


Water 

in 



Figure 1. The standard recycling life support system design. 

The system in Figure 1 is essentially identical to the recycling International Space Station (ISS) life support 
system. 18 ' 20 A similar recycling architecture has been used since the 1960’s. Recycling systems do require some 
storage of oxygen and potable water, but much less than the total mission consumption. 

The standard recycling life support system has systems that deal with carbon dioxide, oxygen, wastewater, and 
urine and flush water. The ISS life support technologies are listed in Table 4. 
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Table 4. 1SS technologies. 


Carbon dioxide removal 

Four Bed Molecular Sieve (4BMS) 

Carbon dioxide reduction 

Sabatier 

Oxygen storage 

High pressure tanks 

Oxygen generation 

Solid Polymer Water Electrolysis (SPWE) 

Water storage 

Stainless steel tanks with metal bellows 

Water processing 

Multifiltration 

Urine processing 

Vapor Compression Distillation (VCD) 


The ISS technologies were originally selected for Space Station Freedom (SSF). 21 Carbon dioxide is removed 
using a Four Bed Molecular Sieve (4BMS) and stored. It is reduced to water and methane by a Sabatier processor. 
Since the crew produces water as well as carbon dioxide by metabolizing food using the atmospheric oxygen, 
recycling all the crew’s consumed oxygen also requires generating oxygen from water. Oxygen is stored in high 
pressure tanks. Oxygen is generated by the Solid Polymer Water Electrolysis (SPWE) of water. The oxygen is 
usually vented directly to the cabin, but an additional stored reserve would be needed in case of a loss of cabin 
pressure. Pressure tanks could be used and refdled during the mission. The hydrogen produced by oxygen 
electrolysis is used by the Sabatier for carbon dioxide reduction. The methane produced by the Sabatier is vented, 
but could be used for propulsion. 

The hygiene and laundry water is stored and processed to potable using multifiltration. Not shown are the 
condensing heat exchangers that cool the atmosphere and remove humidity that is also recycled by multifiltration. 
Urine and flush water are purified by Vapor Compression Distillation (VCD) before being added to the other 
wastewater. 


VIII. Life support recycling equipment equivalent system mass 

The system mass is frequently used to compare life support systems. It has been generalized as Equivalent 
System Mass (ESM), which includes the mass of the hardware, its spare parts and operating materials, the mass of 
the power and cooling systems required to support the system, and even the structural mass required to provided the 
enclosed pressurized volume to house the system. A life support system using storage will have the total mass 
increase rapidly with longer mission duration. A recycling system will have a large initial mass of hardware and 
supporting equipment but only a slowly increasing mass of spare parts and materials. After a certain mission 
duration called the ESM breakeven date, the mass of a recycling system will be less than that of a resupply system. 
The breakeven dates for air and water recycling systems are typically several months, with water recycling breaking 
even first. 

To estimate the ESM of future deep space life support systems, we use the ESM of the International Space 
Station (ISS) Environmental Control and Life Support System (ECLSS). The ESM is obtained by summing the 
mass, volume, power, and cooling requirements of the individual ECLSS components and computing the equivalent 
mass using Mars deep space transit mass equivalents. 

The functions and technologies of the ISS ECLSS are listed in Table 4. The mass, volume, power, and cooling 
are from Carrasquillo, Reuter and Philistine, 1997 21 , except for the Sabatier, which is from Eckart, 1996. 17 

ESM is based on the system mass, m, volume, v, power, p, cooling, c, logistics mass per year, 1, and d, the 
mission duration. ESM determines the launch mass and cost. 

ESM (m, v, p, c, 1, d) = m + v * me(v) + p * me(p) + c * me(c) + 1 * d 

me(v) is the mass equivalent of volume, etc. 23 
A. ISS ECLSS ESM 

The ESM of the ISS recycling ECLSS is shown in Table 5. The ESM is adjusted to the number of crewmembers 
supported. The mass equivalents are for a Mars deep space transit mission. 1 1 
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Table 5. 1SS ECLSS ESM. 


Function 


# 

CM 

mass, 

kg 

volume, 

m3 

power, 

kW 

cooling, 

kW 

ESM, 

kg/CM 

logistics, 

kg/CM-d 

Carbon dioxide 
removal 

4BMS 


201 

0.39 

0.86 

0.86 

135 

0.00 

Carbon dioxide 
reduction 

Sabatier 

■1 

18 

0.75 

0.05 

0.27 

52 

0.00 

Oxygen 

provision 

SPWE 

7 

113 

0.14 

1.47 

1.47 

83 

0.00 

Oxygen storage 

tank 

4 

1,088 

0.00 

0.00 

0.00 

272 

0.00 

Urine processing 

VCD 

8 

128 

0.37 

0.09 

0.09 

29 

0.06 

Water provision 

Multi- 

filtration 

10 

476 

2.25 

0.30 

0.30 

105 

0.13 

Water storage 

tank 

4 

106 

0.52 

0.00 

0.00 

54 

0.00 


totals 






730 

0.20 


mass 

equivalents 


1 

215.5 

237 

60 




units 


ran 


WORM. 





The 1SS ECLSS ESM is 730 kg/CM. The corresponding logistics support is 0.20 kg/CM-d. The ECLSS logistics 
do not include oxygen and water from the shuttle, since these are to be provided by recycling. The ECLSS logistics 
also do not include yearly replacement of the oxygen tanks. Nearly half (45%) of the initial ESM even in a recycling 
system is used for oxygen and water storage. 

B. ESM breakeven date 

Recycling breaks even in ESM when the mission duration, D, is sufficiently long that the ESM of recycling 
becomes less than the mass of an all storage system. Using the ISS ECLSS component based estimate of ESM, this 
occurs when 730 kg + 0.20 kg/day * D days < 9.30 kg/day * D days. The breakeven mission duration is 80 days. It 
would be roughly half that (44 days) if the storage used with ISS ECLSS recycling was not included in ESM. 

IX. Life support storage reliability 

Water and oxygen storage tanks and LiOH canisters are simple and have high reliability. Using multiple 
containers and providing spares can easily achieve ultra reliability. Table 6 shows storage component failure rate per 
day, Mean Time Before Failure (MTBF), and probability of failure, Pr(fail), in 1,000 days. 


Table 6. Storage failure rates ] 

per day, MTBF, and Pr(fail). 

Storage 

Failure rate 

MTBF, 

Pr(fail) in 

Pr(fail) in 1,000 days 

Pr(fail) in 1,000 days 

component 

per day 

days 

1,000 days 

with full spares 

with 10% spares 

Water tank 

2.40E-07 

4,166,667 

2.40E-04 

5.76E-08 

3.16E-06 


1.00E-06 

1,000,000 

1.00E-03 

1.00E-06 

5.47E-05 

LiOH canister 

3.60E-05 

27,792 

3.60E-02 

0.00E+00 

4.08E-17 

Total 

3.72E-05 

26,866 

3.72E-02 

1.06E-06 

5.78E-05 


The failure rates are estimated from Yakut and Barker, 1968.’’ The MTBF is the inverse of the failure rate and is 
26,866 days, about 74 years. This seems good, but the overall Pr(fail) for 1,000 days is 0.0372, 37.2 times the 
maximum Pr(LOC) of 0.001. The Pr(LOC) is the probability that the one water tank or the one oxygen tank or one 
of the 1,000 LiOH canisters will fail, leaving the crew with insufficient life support. 

A. Increasing storage reliability with spares 

The most likely failure is a LiOH canister. A new one is used every day and the daily failure rate is the estimated 
probability that one will fail. We can improve reliability using spares. If full redundancy was provided, with two full 
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water tanks, two full oxygen tanks and twice the number of LiOH canisters, reliability would be greatly increased. If 
we provide 2,000 LiOH canisters when 1,000 are needed, the probability that 1,001 will fail is vanishingly small. 
The overall probability of LOG is three orders of magnitude less than the requirement. However, the already large 
mass is doubled. 

It is more efficient to divide the water and oxygen tanks into ten tanks each and provide one spare for both. A 
loss of crew still requires two tank failures. Similarly the 1,000 LiOH canisters are provided with 100 spares, and 
101 must fail to cause loss of crew. Ten percent spares are used because five percent was not sufficient to achieve 
the needed reliability. 

The probability that ten tanks with one spare will fail is much higher than the probability two tanks will fail, 
since there are 11 * 10 =110 different pairs of tanks that can fail. The exact failure probability calculation uses the 
binomial distribution, following calculations from Jones 2008. 24 Using ten percent spares, the total Pr(fail) in 1,000 
days is reduced to 5.78 * 10" 5 , still more than ten times lower than the requirement. The Pr(LOC) is nearly all due to 
the oxygen tanks and additional spare would reduce it two orders of magnitude. 

Life support using storage can easily achieve ultra reliability using spares with only a reasonable mass increase. 
The effectiveness of storage spares depends on the assumption that common cause failures will not occur. The 
simplicity and long history of the storage tank and canister technologies make this seem plausible. Life support 
systems contain many more components (connectors, fans, pumps, etc) than the basic subsystems and assemblies 
used in these calculations. Although reliability computations would be improved, this auxiliary hardware is 
generally common to all architectures discussed. 

X. Life support recycling reliability 

The failure rates for the active recycling processors in Figure 1 and the ISS technologies in Table 4 were 
computed in Appendix A using the schematics, parts lists, and component reliabilities in Yakut and Barker, 1968. 23 
Table 7 shows recycling system processors’ failure rate per day and Mean Time Before Failure (MTBF). 


Table 7. Recycling failure rates per day and MTBF’s. 


Function 

Processor 

Failure 
rate per 
day 

MTBF, 

days 

LOC one 
tenth failure 
rate 

LOC ten 
times 
MTBF, 
days 

Approximate 
Pr(LOC) in 
1,000 days 

Carbon dioxide 
removal 

Four Bed Molecular 
Sieve (4BMS) 

2.99E-03 

335 

2.99E-04 

3,349 

0.299 

Carbon dioxide 
reduction 

Sabatier 

2.74E-03 

365 

2.74E-04 

3,651 

0.274 

Oxygen generation 

Solid Polymer 
Water Electrolysis 
(SPWE) 

2.10E-03 

476 

2.10E-04 

4,761 

0.210 


Multifiltration 

4.39E-03 

228 

4.39E-04 

2,277 

0.439 


Vapor Compression 
Distillation (VCD) 

3.71E-03 

269 

3.71E-04 

2,694 

0.371 


Totals 

1.59E-02 

63 

1.59E-03 

628 

0.860 


Recycling systems are complex and have much lower reliability than simple storage systems. The processor 
failure rates range from 0.21 to 0.44 percent per day, and the total of the five processors failure rates is 1.59 percent 
per day. The corresponding MTBF’s, which are the inverse of the failure rate, range from 228 to 476 days, and the 
overall MTBF is only 63 days. These rates and MTBF’s seem to be the right order of magnitude for the ISS 
technologies, as they suggest one life support failure every two months rather than every two weeks or every two 
years. (The calculations of Table 7 use a standard approximation described in Appendix B. The approximate 
Pr(LOC)’s in 1,000 days are up to 20 percent too high. See Appendix B for exact failure probability calculations.) 

For deep space missions, we are less concerned with recurring failures and repairs than with unrecoverable 
failures than can cause loss of crew. Space station provides replacement units for on orbit replacement of key 
subsystems, and a new deep space system would be designed to be repaired and would provide spares for extensive 
replacement of valves, pumps, sensors, and other components that are likely to fail. We assume that providing 
extensive replacement units and spare parts can reduce the failure rate by a factor of ten. If no common cause 
failures occur, providing spares could provide much higher expected reliability, but common cause failures are 
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typically ten percent of all failures, which would set a factor of ten bound to the failure rate reduction than can be 
obtained using spares. 

We assume that unrepairable failures causing loss of crew (LOC) are one tenth of the total failure rate. The 
corresponding LOC failure rates and MTBF’s are also given in Table 7. The probability of LOC, Pr(LOC), in 1,000 
days for each system is 1,000 times its LOC failure rate, and ranges from 21 to 44 percent. Considering there are 
five life support processors, the Pr(LOC) approaches certainty in 1,000 days. In addition to providing spares and 
repairing the life support system, something more must be done to achieve acceptable Pr(LOC) for long missions. 

XI. Comparison of storage and recycling ESM 

We consider simple storage with one water tank, one oxygen tank, and 1,000 LiOH canisters. We also 
investigate storage with ten percent spares, corresponding to 10 smaller water tanks with one spare, 10 smaller 
oxygen tanks with one spare, and 1,000 LiOH canisters with 100 spares. The ESM of storage is 9.30 * D kg/CM, 
where D is the mission duration in days, and the ESM increases to 10.23 * D kg/CM with ten percent spares. These 
two storage ESM’s are plotted in Figure 1, going up and right from the origin. 


ESM versus duration 


Storage 

Storage and 10% spares 
Recycling 

Dual redundant recycling 
Four redundant recycling 


0 200 400 600 800 1000 

Duration, days 


Figure 1. Storage and recycling ESM. 

We consider a recycling system in which each subsystem has spares that increase the fixed ESM by fifty percent 
and cut the failure rate by one order of magnitude, as discussed previously. The ESM of a recycling system with 
fifty percent spares by mass is 1,095 kg/CM + 0.20 *D kg/CM, where D is the mission duration in days. (From 
Table 5, 730 * 1.5 = 1,095.) 

We also consider recycling systems where each active subsystem has N redundant copies, one operating and N-l 
spares. We will assume that we have available several carbon dioxide removal, carbon dioxide reduction, oxygen 
generation, water processing, and urine processing recycling technologies, and that all are different so that there are 
no internal common cause failures. Each technology has a fixed initial ESM, a daily logistics and material resupply 
mass, and a failure rate per day. For simplicity, we assume that all the different recycling processors for the same 
function have the same ESM, daily logistics mass, and failure rate. We assume that the oxygen and water storage 
tanks used in recycling are highly reliable and do not require spares. 
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The ESM of recycling with N - 1 redundant non-operating spares is 1,095 kg/CM + 606 * (N - 1) kg/CM + 0.20 
*D kg/CM. (From Table 5, (730 -272 - 54)* 1.5 = 606.) The recycling ESM’s are plotted in Figure 1, for a single 
recycling system, N = 2 dual redundancy, and N = 4 redundancy. The breakevens with storage and 10% spares occur 
at about 120 days for a single system, 180 days for N = 2 redundancy, and 300 days for N = 4 redundancy. 

XII. Comparison of storage and recycling Pr(LOC) 

The Pr(LOC) of storage with no spares is the failure rate per day times the number of days, 3.72 * 10' 5 *D, from 
Table 6. The Pr(LOC) of storage with 10% spares is computed using the binomial distribution, as mentioned. The 
value of the Pr(LOC) is 5.78 10" 5 at 1,000 days, as shown in Table 6. The storage Pr(LOC)’s are plotted in Figure 2. 
Storage with no spares fails to meet the required Pr(LOC) of 10" 3 after only 27 days. Storage with ten percent spares 
has a Pr(LOC) more than one order of magnitude better than the requirement at 1,000 days. 


Probability of LOC versus duration 



Required 

Storage 

Storage and 10% spares 
Recycling 

Dual redundant recycling 
Four redundant recycling 


Figure 2. Storage and recycling Pr(LOC)’s. 


The Pr(LOC) of a single recycling system, with spares that cut the failure rate by one order of magnitude, is 1.59 

* 10' 3 *D, from Table 7. The Pr(LOC) of a dual redundant, N = 2, recycling system is roughly the sum of the failure 
probabilities of the five pairs of subsystems. Allowing for the spares that cut the failure rate by ten, Pr(LOC) = (2.99 

* 10" 4 * D) 2 + (2.74 * 10" 4 * D) 2 +(2.10 * 10' 4 * D) 2 +(4.39 * 10' 4 * D) 2 + (3.71 * 10" 4 * D) 2 = 5.37 * 1(T 7 * D 2 . (With 
dual redundancy, both redundant units must fail for the full system to fail. The probability that both redundant units 
will fail is the product of their individual failure probabilities.) 

This calculation is correct if both the prime subsystems and the spare subsystems are run full time so must fail 
before life support is lost. It is much better to use cold spares, which have a negligible failure rate as long as they are 
not operating. The probability of a given number of failures with failed units being replaced by cold spares is given 
by the Poisson distribution, following calculations described in Jones, 20 10. 26 For one operating unit and one cold 
spare, the Poisson distribution shows that the above failure probability is reduced by half. 

The recycling Pr(LOC)’s are plotted in Figure 2, for a single recycling system, N = 2 dual redundancy, and N = 4 
redundancy. The Poisson distribution calculation is used for the redundant systems. Single recycling fails to meet 
the required Pr(LOC) of 10" 3 even on the first day. N equals two redundancy meets the required Pr(LOC) only out to 
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about 60 days, far short of the ESM breakeven date of 180 days. N equals four redundancy meets the required 
Pr(LOC) out to about 800 days, well beyond its ESM breakeven date of 300 days. The four redundant recycling 
system does have higher Pr(LOC) than storage with 10% spares at longer durations, but it meets the Pr(LOC) 
requirement and saves mass for mission durations between 300 and 800 days. 

A triple redundancy system, N = 3, is of interest but not plotted. The ESM breakeven with storage and 10% 
spares occurs at about 240 days for N = 3 redundancy. N = 3 redundancy meets the required Pr(LOC) out to about 
320 days. 

Even though single string recycling has its ESM breakeven with storage at 120 days, its low reliability requires 
adding redundant systems that push the ESM recycling breakeven date further out. Using either storage with 10% 
spares or redundant recycling systems, we would use storage for missions from 1 to 240 days, triple redundant 
recycling from 240 to 320 days, quadruple redundant recycling from 320 to 800 days, and probably higher multiple 
recycling beyond 800 days. 

This result for redundant recycling systems is disappointing. We would like recycling to breakeven sooner and 
save more ESM. The ability to use recycling is very sensitive to its ESM and failure rate. Current recycling systems 
appear to have inadequate reliability for deep space life support. Storage with spares easily achieves much better 
than the required Pr(LOC). 

XIII. Improved lower mass and failure rate recycling 

Suppose we could reduce the fixed ESM of recycling by a factor or two and reduce its failure rate per day by a 
factor of ten. The ESM of storage is 10.23 * D kg/CM with ten percent spares. The ESM of recycling with N - 1 
redundant non-operating spares was 1,095 kg/CM + 606 * (N - 1) kg/CM + 0.20 *D kg/CM. The fifty percent 
increase in fixed ESM for spares is included. If the fixed ESM is reduced by a factor of two, this becomes 548 
kg/CM + 303 * (N - 1) kg/CM + 0.20 *D kg/CM. The ESM of storage with ten percent spares and of the improved 
recycling system alone and with dual redundancy is shown in Figure 3. 
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The recycling breakeven duration is about 60 days for a single recycling system and 100 days for dual 
redundancy. 

The Pr(LOC) of storage with ten percent spares and of the assumed improved recycling system alone and with 
dual redundant systems is plotted in Figure 4. 


Probability of LOC versus duration 



Required 

Storage and 10% spares 
Recycling 

Dual redundant recycling 


Figure 4. Storage and assumed improved recycling Pr(LOC). 


The assumed improved recycling meets the required Pr(LOC) of less than 1 0" 3 only for very short missions of a 
few days. Dual redundant improved recycling meets the required Pr(LOC) for missions as long as 600 days. Storage 
with ten percent spares has Pr(LOC) nearly two orders of magnitude better. With the assumed improvements, one- 
half fixed recycling ESM and one-tenth recycling failure rates, a dual recycling system with one operating unit for 
each processor and one spare would save ESM and meet the required Pr(LOC) for missions from 100 to 600 days 
duration. This result shows that plausible improvements in recycling could make it the best system for long deep 
space missions. 


XIV. Combining storage and recycling 

Pure storage with ten percent spares can provide excellent reliability, more than reasonably required, but storage 
requires a very large mass for long missions. Recycling systems that would save most of the mass of storage have 
apparently inadequate reliability for deep space missions. Triple and quadruple redundant recycling is required to 
achieve a reasonable probability of loss of crew. Is it possible to combine storage and recycling to save mass over 
pure storage or gain better reliability than recycling? 

A. Effects of recycling processor failures 

Storage can be used to mitigate the effects of recycling failures, to forestall loss of the crew. The three necessary 
life support functions for survival are carbon dioxide removal, oxygen provision, and water provision. (Food is 
assumed available, dehydrated, and stored.) The five recycling processors perform carbon dioxide removal, carbon 
dioxide reduction, oxygen generation, water processing, and urine processing. If any one of these five key 
processors fails and its function is not otherwise supplied, loss of crew will occur. 
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Consider the five key processors one by one. If carbon dioxide removal fails, carbon dioxide accumulates in the 
cabin atmosphere and the crew quickly succumbs. If carbon dioxide reduction fails, the product water is not 
available and the total water supply is ultimately depleted as its oxygen is converted to carbon dioxide. If oxygen 
generation from recycled water fails, oxygen cannot be provided to the crew. If the water processor fails, clean water 
runs out and all water ends as wastewater. Even if the urine processor alone fails, the water supply is depleted 
because all the recycled water becomes unrecoverable urine. If any one of the five processors fails, and its 
performance not replaced, loss of crew occurs. 

B. Mitigating recycling processor failures using storage 

If the prime carbon dioxide removal subsystem is a 4BMS and it fails, it must be replaced by a redundant 
processor or by stored LiOH to avoid loss of crew. Because normally the system recycles the carbon dioxide 
recovered by the 4BMS, the water and oxygen supplies will be impacted if the 4BMS fails. Loss of crew due to 
carbon dioxide accumulation will occur only if the 4BMS and all its backup systems fail. 

If the carbon dioxide reduction subsystem fails, we lose its water production. The same water deficiency occurs 
if the 4BMS carbon dioxide removal system fails and we rely on LiOH. This water deficiency can be supplied by 
sufficient stored water. Then loss of crew will occur only if another water depleting failure occurs in addition to the 
carbon dioxide reduction system failure. 

If the oxygen generation subsystem fails, it must be replaced by another one or by stored oxygen to avoid loss of 
crew. An alternative storage approach would provide oxygen and hydrogen. Operational flexibility could be 
improved by including a fuel cell to use hydrogen and oxygen produce water and electrical power. The oxygen and 
hydrogen could be in addition to or in place of stored water. 

If the water processor and any redundant processors fail, all the crew’s water must be supplied from storage. If 
all recycling processors fail, the crew will have no more than the stored water. Probably the carbon dioxide 
reduction product water can still be used for oxygen generation, without treatment by the water processor. 

If the urine processor and its backups fail, a large amount of water is lost daily as unrecoverable urine. The 
amount of urine is variable, since it is obviously dependant on water consumption, and its nominal amount is a 
relatively small portion of the total requirement. It may be possible that the use of stored water and the operation of 
the recycling water processor can provide the crew with nearly the full amount of required water. 

XV. Partial duration storage can improve reliability and extend missions 

Providing storage with spares to meet all requirements over the mission duration has high reliability but very 
high mass cost. Do we need sufficient storage to cover the full mission duration? Could we provide stored oxygen or 
water or LiOH for only a part of the mission duration? 

At first, it seems we must provide storage for the full mission duration. The Pr(LOC) of the assumed improved 
recycling system is 1.59 * 10' 3 *D, which is 0.01 at 60 days. Suppose we added stored oxygen, water, and LiOH for 
half the mission duration, 30 days. The improved Pr(LOC) is one-half the original, 0.005, since the recycling must 
operate without failure for the other 30 days. To reach the required Pr(LOC) of 0.001, we must provide storage for 
90 percent of the mission duration, 54 days. Providing storage for the full mission length would give much better 
reliability, only cost ten percent more storage, and would allow us to eliminate all recycling. 

However, partial stores are more effective when combined with redundant recycling. For redundant systems, the 
Pr(LOC) ~ D n , where N is the level of redundancy, typically 3 or 4 (see Section 7 for an example calculation). 
Again, suppose we added stored oxygen, water, and LiOH for half the mission duration. The Pr(LOC) for the other 
half of the mission that recycling would be needed is only one-eighth or one-sixteenth of the original Pr(LOC). To 
get a factor of ten reduction in Pr(LOC) with quadruple redundancy, stores would have to be provided for 56 percent 
of the mission. Adding partial stores to redundant recycling systems can improve their reliability significantly. 

Alternately, partial mission duration storage can be used to extend the mission duration of a recycling system. 
The triple redundancy system has ESM breakeven at about 240 days and meets the required Pr(LOC) out to about 
320 days. If the mission duration is 350 days we can add 30 days of storage. The total ESM is 2,371 kg for recycling 
plus 307 kg for 30 days storage, 2,678 kg total. This is less than the ESM for quadruple recycling at 350 days, 2,983 
kg. Providing partial storage also provides a useful dynamic buffer for down time and repairs. 

XVI. Adding 10 percent duration storage to recycling 

We consider the effects on ESM and Pr(LOC) of using redundant recycling and adding storage sufficient for ten 
percent of the mission duration. These mixed storage and recycling designs will be compared to the earlier designs, 
storage with 10% spares and to redundant recycling. 
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A. Recycling system with 10 percent storage ESM 

The ESM of the mixed storage and recycling life support design, with 10 percent of the mission duration 
supplied by storage, is 1,095 kg/CM + 0.20 *D kg/CM plus 0.1 * 10.23 * D kg/CM for 10 percent duration storage 
including 10% spares. The combined storage and recycling system ESM’s are plotted in Figure 5. 



The breakevens with pure storage occur for redundant recycling with 10% storage occur at somewhat later dates 
than without the added storage, 200 versus 180 days for N = 2 redundancy, and 340 versus 300 days for N = 4 
redundancy. 

B. Recycling system with 10 percent storage Pr(LOC) 

What is the failure probability of a redundant recycling system with ten percent added storage? With no added 
storage, loss of crew occurs as before, if all the redundant units of any subsystem fail during the mission. With the 
ten percent added storage, loss of crew occur if all the redundant units of any subsystem fail during the first 90 
percent of the mission, or if all the redundant units fail during the last 10 percent of the mission and the storage also 
fails. This is complicated because both a processor and its specific backup storage must fail to cause loss of crew. If 
carbon dioxide removal fails and water storage fails, the crew is not impacted. Since storage can easily be made as 
reliable as needed using spares, we assume the 10 percent added storage does not fail. Then the reduced Pr(LOC) 
due to the 10 percent added storage is simply the probability that the redundant recycling system fails during the 
first 90 percent of the mission. 

The recycling with 10 percent storage systems’ Pr(LOC)’s are plotted in Figure 6. 
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Probability of LOC versus duration 



Required 

Storage and 10% spares 

Dual redundant recycling 

Four redundant recycling 

Six redundant recycling 

Dual redundant recycling 
with 10% storage 

Four redundant recycling 
with 10% storage 


Figure 6. Combined recycling and 10% storage system Pr(LOC). 


The Pr(LOC)’s of N redundant recycling with 10 percent added storage seem very close to the Pr(LOC)’s 
without storage, but the logarithmic plot compresses the effect of the added storage. Four redundant recycling meets 
the required Pr(LOC) out to 800 days duration, while four redundant recycling with 10 percent storage meets the 
required Pr(LOC) out to 900 days duration. 

The gains of added 10 percent storage are small compared to the gains of full redundant systems. N = 6 
redundancy is shown in the ESM chart of Figure 5 and the Pr(LOC) chart of Figure 6. At long mission durations of 
800 to 1,000 days, N = 6 redundancy does not have much more ESM than four redundant recycling with 10% 
storage, but it has two orders of magnitude better Pr(LOC). Storage for part of the mission duration can improve 
Pr(LOC), but not very significantly. 


XVII. Partial water storage to reduce storage ESM 

Providing all the required life support materials for the full duration of the mission is the baseline full storage 
system. Above we considered providing all the materials for only a small portion of the mission duration. Next we 
consider providing some of the materials, but for the full mission duration. 

Specifically, we consider providing the minimum survival water from storage and using recycling to provide the 
rest of the water requirement. This partial storage approach does not work for oxygen or carbon dioxide removal 
since the full oxygen supply and carbon dioxide removal capability are needed for crew survival. 

The mixed storage and recycling system to be investigated has full oxygen storage, a full LiOFl supply, and a 
partial water supply, all with ten percent spares for high reliability, and augmented with several water recycling 
processor systems to meet the full water requirement. Since the partial water supply is sufficient for crew survival, 
the Pr(LOC) of this partial water system is the same as that of full storage. The ESM is less than that of full storage 
by the net of water storage ESM reduction and water recycling ESM gain. 


A. Water requirements 

Table 8 shows the water requirements only, after Table 1, with the minimum survival water requirement and the 
estimated recycling products. 
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Table 8. Survival and minimum water requirements and recycling. 


Water 

requirements 

kg/CM- 

d 

Wastewater 

kg/CM- 

d 

Survival water 

1.30 



Other crew water 

2.22 

Respiration and perspiration 
condensate 

2.28 

Urine flush water 

0.50 

Urine and flush water 

2.00 

Wash water 

1.29 

Used wash water 

1.29 

Total needs 

5.31 

Total waste 

5.57 


Recycling 

efficiencies 


0.99 

0.90*0.99 

0.99 

Recycled 



1.78 

1,28 

5.32 


Table 8 assumes that the food supply is dehydrated, which saves considerable launch mass but makes supplying 
the water requirements much more difficult. The crew must receive 1.15 kg/CM-d water to rehydrate the food plus 
2.37 kg/CM-d drinking and food preparation water, a total of 3.52 kg/CM-d. Of the 3.52 kg/CM-d supplied for crew 
consumption, 1.30 kg/CM-d is the survival minimum and 2.22 kg/CM-d is other crew water. 

The total wastewater exceeds the water needs supplied due to the 0.35 kg/CM-d produced by the metabolism of 
food, less the 0.09 kg/CM-d in feces. 0.35 - 0.09 = 0.26 = 5.57 - 5.31. If recycling is the only source of water it 
must be 95 percent efficient. (5.31/5.57 = 0.953) This is just barely achieved with the assumed recycling efficiencies 
of 90 percent for urine and 99 percent for condensate and hygiene water. Current systems do not achieve these high 
assumed efficiencies. 

Supplying fully hydrated food would make providing water much easier. The water supplied would need to be 
only 5.31 - 1.15 = 4.16 kg/CM-d and the recycling efficiency would need to be only 4.15/5.57 = 75 percent. Even 
more significantly, the water stored in hydrated food would provide nearly all of the minimum survival water. The 
stored hydrated food is nearly the equivalent of a water storage tank holding all the survival water. Stored hydrated 
food could be used instead of a water storage tank. 

XVIII. Water storage and water recycling design 

Four water delivery systems, each producing one quarter of the output, 5.32/4 = 1.33 kg/CM-d of water, will be 
used to produce the required water. One system uses storage and the other three perform recycling. Any one of the 
four sources is sufficient to supply the 1.33 kg/CM-d of survival water, so all four water sources must fail to cause 
loss of crew. Failures of all but one water supply source would cause inconvenience or loss of mission but not loss 
of crew. Additional recycling systems could be provided either to increase the water supply or as off-line spares to 
increase reliability. 

A. Water storage and recycling ESM 

We identify the ESM of a system with full oxygen and LiOFI storage, one-quarter water storage, and three- 
quarter water recycling. Table 9 shows the storage component ESM. 

Table 9. Oxygen, LiOH, and 1/4 water storage ESM. 



kg/CM-d 

Oxygen 

0.84 

Oxygen tankage 

0.34 

Water 

1.33 

Water tankage 

0.27 

LiOFI and packaging 

1.75 

Total 

4.52 


The total ESM of Table 9 must be increased by ten percent to allow for the spares needed for high reliability, so 
the total storage ESM is 4.97 kg/CM-d. The water recycling system ESM is shown in Table 5. The water processor 
has an ESM of 105 kg/CM + 0.13 kg/CM-d. This must be increased by fifty percent to allow for the spares needed 
for high reliability, so the total ESM of three one-quarter capacity water processors is 1.5 * 0.75 * (105 kg/CM + 
0.13 kg/CM-d) =118 kg/CM + 0.15 kg/CM-d. (It is assumed that the water processor ESM scales linearly with 
capacity, so that a one quarter capacity processor has one quarter of the original processor ESM. The actual ESM of 
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a one quarter capacity processor will probably be larger.) The urine processor has an ESM of 29 kg/CM + 0.06 
kg/CM-d, which is also increased by fifty percent to allow for the spares, so the total urine processor is 1.5 * (26 
kg/CM + 0.06 kg/CM-d) = 39 kg/CM + 0.09 kg/CM-d. The total ESM for full oxygen and LiOH storage, one- 
quarter water storage, and three-quarter water recycling is 157 kg/CM + 5.21 kg/CM-d. This ESM is plotted in 
Figure 7. 



The system with full oxygen and LiOH storage, one-quarter water storage, and three-quarter water recycling has 
about half the ESM of full storage. Both have 10% spares. The breakeven points with redundant recycling are at 320 
days for N = 2, 580 days for N = 4, and 800 days for N = 6. 

B. Water storage and recycling Pr(LOC) 

The system with full oxygen and LiOH storage, one-quarter water storage, and three-quarter water recycling has 
the exact same Pr(LOC) as the full storage system. This Pr(LOC) is plotted in Figure 8. 
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Probability of LOC versus duration 



Required 


Storage and 10% spares, 
1/4 water storage & 3/4 
recycling 

Dual redundant recycling 


Four redundant recycling 


Six redundant recycling 


Figure 8. Pr(LOC) versus mission duration. 


The full storage system and the one-quarter water storage systems both have the same acceptable probability of 
loss of crew for mission durations beyond 1,000 days. The dual redundant recycling system meets the required 
Pr(LO) out to 60 days, the four redundant recycling system out to 300 days, and the six redundant recycling system 
out beyond 1,000 days. 

A triple redundancy system, N = 3, has an ESM breakeven with the one-quarter water storage system at about 
440 days for N = 3 redundancy. N = 3 redundancy meets the required Pr(LOC) out to about 320 days. 

The one-quarter water storage system has minimum ESM out to 320 days. The dual redundant recycling has 
lowest ESM beyond 320 days but has too high Pr(LOC) beyond 60 days and so it is unusable where it saves mass. 
Eliminating the dual redundant recycling system, the one-quarter water storage system has lowest ESM out to 440 
days. The triple redundant recycling system has lower ESM beyond 440 days but has too high Pr(LOC) beyond 320 
days and so can not be used where it saves mass. Eliminating the triple redundant recycling system, the one-quarter 
water storage system has lowest ESM out to 580 days. The four redundant recycling has lower ESM beyond 580 
days but has too high Pr(LOC) beyond 300 days and again can not be used. Eliminating the four redundant recycling 
system, the one-quarter water storage system has minimum ESM out to 800 days. Beyond that point the six 
redundant recycling system has lower ESM and sufficiently low Pr(LOC), even better than the full storage and one- 
quarter water storage systems as designed. 


XIX. What are the best designs? 

The best design provides the required performance with the required reliability, at the minimum cost. Compared 
to the system with full oxygen and LiOH storage, one-quarter water storage, and three-quarter water recycling, none 
of the designs using redundant recycling without storage both save mass and meet the required probability of loss of 
crew for mission durations of less than 800 days, beyond which a six redundant recycling system is better, saving 
mass and exceeding the reliability requirement. 

We found earlier that, when comparing multiply redundant recycling to a full storage system, that full storage 
was best for missions up to 240 days, and then triple, quadruple, and probably higher multiple recycling were better 
for longer durations beyond 240 days. The best designs are selected from the candidates compared. Since the one- 


20 

American Institute of Aeronautics and Astronautics 


quarter water storage system has less mass and the same probability of loss of crew as the full water storage system, 
one-quarter water storage can be better than systems that were better than full water storage. 

We also noted earlier that, for improved recycling with one half lower ESM and one-tenth lower failure rates, 
multiple improved recycling systems would save ESM and meet the required Pr(LOC) for missions beyond 100 
days duration, when compared to full storage. If multiple improved recycling was compared to the one-quarter water 
storage system, with roughly half the ESM of full storage, it would probably save ESM and meet the required 
Pr(LOC) for missions beyond 200 days duration. 

Systems engineering is about trade-offs. Increasing reliability requires more mass and ESM, either more storage 
or added redundant recycling systems. The design choice between storage and recycling is especially difficult 
because the problems of each approach increase as mission duration increases. The mass of storage increases 
linearly with mission duration. The failure probability of N redundant recycling increases as mission duration to the 
Nth power. Recycling must achieve lower ESM and lower failure rates to dominate storage for deep space missions. 

XX. Results summary 

We have always known: 

1 . Recycling is desirable on long missions to reduce life support mass. 

2. Deep space missions will be long and so favor recycling. 

3. Redundant recycling systems are needed to improve reliability. 

4. Diverse redundancy helps prevent internal common cause failures. 

We have recently realized: 

1. Ultra reliable life support is needed in deep space since rapid resupply or crew return are not possible. 

2. Stored material is much more reliable than recycling. 

3. Deep space missions can use storage instead of or combined with recycling to increase reliability. 

4. Ultra reliable recycling systems must be developed. 

We now find: 

1. Recycling systems do not have low enough mass and failure rates to be used to replace storage. 

2. Material storage predominates in the lowest mass designs that meet reliability requirements. 

3. High reliability storage must provide for all vital needs over the full mission duration. 

4. The survival minimum of water is about one-fourth the total water requirement. 

Storing only the water needed for survival can achieve the same low probability of loss of crew as full storage 
with about half the mass. 


XXI. Similar current results 

The recycling life support subsystem failure rates in Appendix A were computed using the schematics, parts 
lists, and component reliabilities in Yakut and Barker, 1968. 25 The recycling system architecture of Figure 1 and the 
subsystem technologies of Table 4 have not changed very much over the decades. It was assumed that the failure 
rates of basic components such as pumps, valves, heat exchangers, tanks, filters, etc. have not changed significantly. 
If components are now much more reliable, existing recycling systems would be more able to replace storage and 
save mass on long distant missions. This is unfortunately not true. 

A paper by Lange and Anderson conducted a study similar to this and reached similar conclusions using 
projected failure rates for the ISS. 27 They made quantitative assessments of ESM and reliability for a one year deep 
space mission. System reliability was increased by adding redundancy and spares. They found that achieving the 
reliability needed for deep-space missions will add substantially to life support mass and limit the use of recycling. 

They found that as the allowed Pr(LOC) is reduced, the mass of recycling systems increases more rapidly than 
the mass of pure storage systems. This suggests that for the highest required reliabilities, pure storage systems would 
have the lowest mass. For a Pr(LOC) allocation to life support of 0.001, the same as assumed in this study, they 
found the optimum system used partial storage, recovering water from humidity condensate and urine but using 
stored oxygen. 

They conclude that high reliability requirements for deep space will substantially increase the life support system 
ESM and reduce the potential mass savings of recycling technologies. Since storage systems require excessive mass 
and recycling systems have insufficient reliability, they state “all of the architectures considered in this study are 
likely to be unacceptable for the 1-year deep-space mission scenario.” 
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XXII. Conclusion 


The intended deliverable of this report was a flexible deep space life support system design approach that meets 
the material provision and reliability requirements with minimum launch mass. The selected design approach is to 
use storage or redundant recycling or a combination to achieve the required ultra reliability with minimum ESM. 
The best design achieves ultra reliability by using storage to provide all the materials necessary for crew survival 
over the mission duration and minimizes ESM by using recycling to provide the water required beyond the survival 
minimum. The design is flexible because it varies with the mission duration and can add recycling systems to 
enhance life support, even a full system for testing and reliability enhancement, and ultimately replace storage with 
recycling if it becomes sufficiently reliable. 

The best deep space life support design uses a combined storage and recycling water system. Only one-quarter of 
the total minimal water requirement is necessary for crew survival, and it can be provided by high reliability storage. 
The other three quarters of the water requirement can be provided by three one-quarter capacity recycling systems, 
which could have diverse redundancy and are likely to operate throughout long missions but are not ultra reliable. 

The partial storage approach does not work for the other recycling functions, since a partial oxygen supply or a 
partial carbon dioxide removal capability does not guarantee crew survival. But since water is two-thirds of the total 
storage, a partial water storage system does provide significant mass reductions compared to full storage. 

For missions far from Earth, sending supplies or spare parts or returning quickly in the event of a life support 
failure is impossible. The crucial current design question for deep space life support is, “Can we implement 
recycling to save mass with ultra reliability or will we be forced to use storage for reliability?” The answer seems to 
be, “Recycling must be improved with lower mass and higher reliability before it can be the best design choice.” 
Multiple redundant recycling processors can save mass over storage systems and can achieve sufficient reliability, 
but cannot easily do both at the same time. Ultra reliable life support is needed, but recycling equipment uses 
complex mechanical and chemical processors that are much less reliable than storage tanks. The low reliability of 
recycling systems largely prevents their use in deep space beyond the Earth-Moon system. 

It was originally expected that recycling would dominate storage in the best design, at least for the shortest deep 
space missions, and that partial storage would be added for longer missions. As it turns out, current recycling 
systems do not seem to be sufficiently reliable to allow their use in deep space without storage back up. And 
providing less than full mission duration back up storage does not sufficiently improve reliability. It is not surprising 
that current recycling systems designed for ISS do not have sufficient reliability for deep space, since they were not 
required to have such high reliability. Current recycling systems can certainly save launch mass for long missions to 
LEO, the Moon, and anywhere in the Earth-Moon system, since quick crew return or resupply is possible and high 
reliability is not necessary. 

A. What must be done? 

With sufficient launch mass capability, human missions can begin to explore deep space in the near future, 
relying on life support largely using storage. The cost of Earth-supplied materials is very high. We have expected to 
reduce life support mass using advanced recycling. How can we do this? 

Obviously, we must develop high reliability recycling systems. Current systems could be redesigned. Simpler 
more robust alternates could be developed. Automatic fault detection, isolation, and repair (FDIR) could be 
implemented. A spare parts and repair approach should be developed. In space manufacturing would be 
advantageous. 

Next, we must measure and demonstrate high reliability using component bench tests and long duration full 
system test beds. To be reasonably sure a system will operate without failure for a year, several systems should be 
demonstrated to operate without failure for several years. Achieving ultra reliability is a long term program. 

Then, operations on ISS and during actual missions are needed to confirm microgravity performance and to 
exercise repair approaches. We should fly combined storage and recycling systems until it can be shown that 
recycling systems have adequate reliability. 

Finally, we should make mission changes to enhance crew safety. Stores and spare recycling parts could be pre- 
emplaced at mission destinations or turn around points. 
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Appendix A: Recycling life support subsystem failure rates 

The failure rates for the active recycling processors in the ISS life support system were computed using the 
schematics, parts lists, and component reliabilities in Yakut and Barker, 1968 25 The processors are shown in Figure 
1 and listed in Table 4 of the main report. A summary table for all the processors is given at the end of this appendix 
and is repeated in the main body of the report. 


Table A 1. Carbon dioxide removal. 


Carbon dioxide 

Four Bed Molecular 


Number of each 

Total failure rate 

removal 

Sieve (4BMS) 

HH Hi 

component 

per day 

Item 

Component 




1 

Beds with heaters 

1.20E-04 

4 

4.80E-04 

2 

Blower 

1.92E-04 

1 

1.92E-04 

3 

C02 accumulator 

2.40E-05 

1 

2.40E-05 

4 

Flow restrictor 

2.40E-04 

3 

7.20E-04 

5 

Fleat exchanger 

1.44E-04 

1 

1.44E-04 

6 

Pump 

4.20E-04 

1 

4.20E-04 

7 

Valves 

1.44E-04 

7 

1.01E-03 

Totals 



18 

0.0030 


Table A 2. Sabatier carbon dioxide reduction. 


Carbon dioxide 
reduction 

Sabatier 


Number of each 
component 

Total failure rate 
per day 

Item 

SB 




1 

C02 tank 

1.00E-06 

1 

1.00E-06 

2 

Filters 

1.20E-04 

3 

3.60E-04 

3 

Flow restrictors 

2.40E-04 

2 

4.80E-04 

4 

H2 tank 

1.20E-05 

1 

1.20E-05 

5 

FI20 tank 

2.40E-07 

1 

2.40E-07 

6 

Liquid/gas 

separator 

4.00E-04 

1 

4.00E-04 

7 

Sabatier reactor 

4.80E-04 

1 

4.80E-04 

8 

Valves 

1.44E-04 

7 

1.01E-03 

Totals 



17 

0.0027 


Table A 3. Electrolysis oxygen generation. 


Oxygen 

generation 

Solid Polymer Water 
Electrolysis (SPWE) 

Component failure 
rate per day 

Number of each 
component 

Total failure rate 
per day 

Item 

Component 




1 

Electrolysis unit 

2.40E-04 

1 

2.40E-04 

2 

Flow restrictors 

2.40E-04 

2 

4.80E-04 

3 

H2 tank 

1.20E-05 

1 

1.20E-05 

4 

02 tank 

1.00E-06 

1 

1.00E-06 

5 

Power supply 

2.40E-04 

1 

2.40E-04 

6 

Pressure controllers 

2.40E-04 

2 

4.80E-04 

7 

Valves 

1.44E-04 

2 

2.87E-04 

8 

Water pump 

3.60E-04 

1 

3.60E-04 

Totals 



11 

0.0021 
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Table A 4. Multifiltration water processor. 


Water 

processing 

Multifiltration 

Component failure rate 
per day 

Number of each 
component 

Total failure rate 
per day 

Item 

Component 




1 

Charcoal filters 

3.60E-05 

2 

7.20E-05 

2 

Chloride dispenser 

1.20E-04 

1 

1.20E-04 

3 

Filters 

3.60E-05 

2 

7.20E-05 

4 

Flow restrictors 

2.40E-04 

4 

9.60E-04 

5 

Membrane 

3.60E-05 

1 

3.60E-05 

6 

Pumps 

3.60E-04 

2 

7.20E-04 

7 

Resin bed 

3.60E-05 

1 

3.60E-05 

8 

Sensors 

2.40E-04 

4 

9.60E-04 

9 

Solenoid flow 
control 

2.40E-04 

1 

2.40E-04 

10 

UV light 

6.00E-04 

1 

6.00E-04 

11 

Valves 

1.44E-04 

4 

5.75E-04 

12 

Water tanks 

2.40E-07 

2 

4.80E-07 

Totals 



25 

0.0044 


Table A 5. VCD urine processor. 



Vapor Compression 
Distillation (VCD) 

S3 

Number of each 
component 


Item 

Component 




1 

Charcoal beds 

3.60E-05 

2 

7.20E-05 

2 

Compressor 

3.60E-04 

1 

3.60E-04 

3 

Condensor 

4.00E-04 

1 

4.00E-04 

4 

Conductivity probe 

2.40E-04 

1 

2.40E-04 

5 

Evaporator 

2.40E-04 

1 

2.40E-04 

6 

Fan 

1.92E-04 

1 

1.92E-04 

7 

Filter 

3.60E-05 

1 

3.60E-05 

8 

Flow restrictors 

2.40E-04 

3 

7.20E-04 

9 

Heat exchanger 

1.44E-04 

1 

1.44E-04 

10 

Pump 

3.60E-04 

1 

3.60E-04 

11 

Resin bed 

3.60E-05 

1 

3.60E-05 

12 

Sensors 

2.40E-04 

2 

4.80E-04 

13 

Valves 

1.44E-04 

3 

4.31E-04 

14 

Water tanks 

2.40E-07 

4 

9.60E-07 

Totals 



23 

0.0037 


Table A 6 gives the five processor failure rates per day from the above tables. 
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Table A 6. All recycling processor failure rates per day, MTBF, and Pr(fail). 


Function 

Processor 

Failure rate 
per day 

MTBF, 

days 

One-tenth 
failure rate 

Ten 

times 

MTBF, 

days 

Pr(fail) in 
1,000 days 

Carbon dioxide 
removal 

Four Bed Molecular 
Sieve (4BMS) 

2.99E-03 

335 

2.99E-04 

3,349 

0.299 

Carbon dioxide 
reduction 

Sabatier 

2.74E-03 

365 

2.74E-04 

3,651 

0.274 

Oxygen generation 

Solid Polymer 
Water Electrolysis 
(SPWE) 

2.10E-03 

476 

2.10E-04 

4,761 

0.210 


Multifiltration 

4.39E-03 

228 

4.39E-04 

2,277 

0.439 

Urine processing 

Vapor Compression 
Distillation (VCD) 

3.71E-03 

269 

3.71E-04 

2,694 

0.371 


Totals 

1.59E-02 

63 

1.59E-03 

628 

1.000 


The Mean Time Before Failure (MTBF) is the inverse of the failure rate. The individual processor failure rates 
are roughly 2 to 4 per 1,000 days, so the MTBF’s are 250 to 500 days. Many failures will occur during a 1,000 day 
mission. The overall life support system failure rate is 1 per 1,000 days, with a corresponding MTBF of 63 days. 

Spare parts will be provided for key functional units and for valves, pumps, fans, and sensors that are more likely 
to fail. It is assumed that nine out of ten failures will be repaired, so that the rate of unrepairable failures that would 
render the recycling system inoperative is one-tenth of the component failure rate. The one -tenth failure rate and the 
corresponding ten times greater MTBF are shown in Table A 6. The corresponding probabilities of failure, Pr(fail), 
in a 1,000 day mission are also shown and are quite large, 21 to 44 percent. It is nearly certain that an all recycling 
system will fail during a 1,000 day mission. Table A. 6 is repeated in the main report as Table 7. 

Appendix B: Exact failure probability calculations 

The main body of this paper assumes that failure rates are constant and small. This allows the approximation that 
the probability of failure over the mission period is equal to the failure rate per day times the mission duration in 
days. This approximation overestimates the probability of failure when the exact computed probability of failure is 
more than a few percent. For example, the Pr(LOC)’s in Table 7 are 10 to 20 percent too high. 

The failure rate, X, is the number of times a component or system is expected to fail per unit time. A constant 
failure rate is nearly always assumed to simplify reliability analysis. Some components have a failure rate that 
decreases with time at first, remains constant during a period of useful life, and finally increases due to wear out, 
following the classic “bathtub curve.” The initially decreasing failure rate is due to burn-in and early failure of 
defective components. The constant failures during useful life are random events. The terminal increasing failure 
rate can be caused by wear out or aging. 

The reliability, R(t), is the probability that a system does not fail before time t. If the failure rate, X, is a constant, 
the reliability, R(t), is an exponential function. 

R(t) = exp (-7. t) 

The failure probability, F(t), is the probability that a system does fail before time t. 

F(t) = 1 - R(t) = 1 - exp (-7^ t) 

For very small values of X t, a Taylor series expansion about zero yields the following approximation, 

F(t) = 1 - exp (-X t) = 1 - [1 + (-kt) + (-A.f) 2 /2! +(-A.t) 3 /3! + ... ] 

F(t) ~ X t 
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The error is less than the term t) 2 /2, or one-half the approximate F(t) squared. If the approximate F(t) is 0. 1, or 
10 percent, the error is less than 0.005, or one half of one percent. (For F(t) = 1 - exp (- 0.1), the approximate F(t) = 
0.1 and the exact F(t) = 0.095.) 

As mentioned, the Pr(LOC)’s in Table 7 are 10 to 20 percent too high. Table B1 shows the approximate and 
exact Pr(LOC)’s for 1,000 days. 


Table Bl. Approximate and exact Pr(LOC)’s for 1,000 days. 


Function 

Processor 

LOC one 
tenth 

failure rate 

Approximate 
Pr(LOC) in 
1,000 days 

Exact 

Pr(LOC) in 
1,000 days 

Difference between 
Approximate and Exact 
Pr(LOC) in 1,000 days 

Carbon dioxide 
removal 

Four Bed Molecular 
Sieve (4BMS) 

2.99E-04 

0.299 

0.258 

0.041 

Carbon dioxide 
reduction 

Sabatier 

2.74E-04 

0.274 

0.240 

0.034 

Oxygen 

generation 

Solid Polymer Water 
Electrolysis (SPWE) 

2.10E-04 

0.210 

0.189 

0.021 

Water 

processing 

Multifiltration 

4.39E-04 

0.439 

0.355 

0.084 


Vapor Compression 
Distillation (VCD) 

3.71E-04 

0.371 

0.310 

0.061 


Totals 

1.59E-03 

0.860 

0.796 

0.064 


The line plots of Pr(LOC) versus duration shown in Figures 2, 4, 6, and 8 in some cases go to less than 0.1, so 
the approximation for small values of k t does not apply. The exact Pr(LOC) curve would increase toward 1.0 less 
rapidly. However, we are attempting to develop designs with a required Pr(LOC) less than 0.001, so the use of the 
approximation does not affect the design results. 

In general, the reason that the approximation F(t) — A. t is widely used is that systems are usually designed to 
have very low failure probabilities. The approximation for very small values of X t applies. 
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